ATTORNEY DOCKET NO. 010201 
CLAIMS 

What is claimed is: 

[cl] 1. A method for distributing and processing an application, comprising the steps of: 
receiving the application and identification information; 
certifying the application satisfies a predetermined criterion; 
assigning a permission to the application; 

transmitting the application, the permission and the identification information to 
the a device using a modification detection technique; 

determining whether the application was modified during transmission; 
storing a rule on the device; 

determining if the application may be process using the permission and the rule; 

removing the application from the device. 

The method of claim 1 further comprising the steps of: 
initiating the execution of the application on the device; 
monitoring the execution of the application; and 
detecting the application attempting to make an improper operation. 

The method of claim 1, wherein the application is denied permission to be 
processed on the device. 

[c4] 4. The method of claim 1, wherein the identification information is retrieved by the 
device. 

[c5] 5. The method of claim 1 further comprising the step of detecting a modification in 
the application. 

[c6] 6. The method of claim 1 further comprising the step of detecting a modification in 
the permission. 
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[c7] 7. The method of claim 1, wherein the modification detection technique uses a 
digital signature. 

[c8] 8. A method for distributing and processing an application, comprising the steps of: 
receiving the application and identification information; 
certifying the application satisfies a predetermined criterion; 
assigning a permission to the application; 

transmitting the application, the permission and the identification information to 
the a wireless device; 

storing a rule on the device; and 
; T| determining if the application may be processed on the device using the 

permission and the rule. 

;j[c9] 9. The method of claim 8 further comprising the steps of: 

initiating the execution of the application on the wireless device; 
O monitoring the execution of the application; 

?l\ detecting the application attempting to make an improper operation; and 

^ removing the application from the wireless device. 

[clO] 10. The method of claim 8, wherein the application was denied permission to be 
processed on the wireless device and further comprising the step of removing the 
application from the device. 

[cl 1] 11. The method of claim 8, wherein the identification information is determined by 
the wireless device. 

[cl2] 12. The method of claim 8, wherein a modification detection technique is used to 
transmit the application, the permission and the identification information. 
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[cl3] 13. The method of claim 12, wherein the modification detection technique uses a 
digital signature. 

[cl4] 14. The method of claim 12 further comprising the steps of: 

detecting a modification in the application transmitted to the device; and 
removing the application from the device. 

[cl5] 15. The method of claim 12 further comprising the steps of: 

detecting a modification in the permission transmitted to the device; and 
removing the application from the device. 

|{16] 16. A method for distributing and processing an application, comprising the steps of: 
M receiving the application and identification information; 

assigning a permission to the application; 

transmitting the application, the permission and the identification information to 
the a device using a modification detection technique; 

determining whether the application was modified during transmission; 
storing a rule on the device; 

determining if the application may be process using the permission and the rule; 



and 



removing the application from the device. 



[cl71 17. The method of claim 16 further comprising the steps of: 

initiating the execution of the application on the wireless device; 
monitoring the execution of the application; 

detecting the application attempting to make an improper operation; and 
removing the application from the wireless device. 

[cl8] 18. The method of claim 16, wherein the application was denied permission to be 
processed on the wireless device and further comprising the step of removing the 
application from the device. 
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[cl9] 19. The method of claim 16, wherein the identification information is determined by 
the wireless device. 

[c20] 20. The method of claim 16, wherein a modification detection technique is used to 
transmit the application, the permission and the identification information. 

[c21] 21. The method of claim 20, wherein the modification detection technique uses a 
digital signature. 

The method of claim 20 further comprising the steps of: 
detecting a modification in the application transmitted to the device; and 
removing the application from the device; 

;fe23] 23. The method of claim 12 further comprising the steps of: 

detecting a modification in the permission transmitted to the device; and 
!L removing the application from the device. 

;]x24] 24. A system for distributing an executing an application on a wireless device, 
comprising: 

a central server operable to receive the application and developer identification, to 
assign a permission associated with the application and to transmit the application 
information to the wireless device; 

a server operable to certify the application satisfies a predefined criterion; and 
the wireless device operable to receive the application and developer 
identification, and to evaluate the assigned permission. 

[c25] 25. The system of claim 24, wherein the central server is further operable to transmit 
the application to the wireless device using a modification detection technique. 



[c22] 22. 
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[c26] 26. The system of claim 24, wherein the central server is further operable to transmit 
the permission to the wireless device using a modification detection technique. 

[c27] 27. The system of claim 24, wherein the server is operable to certify the application is 
the central server. 

[c28] 28. The system of claim 24, wherein the wireless device is operable to evaluate the 
assigned permission using a rule stored in the wireless device. 

[c29] 29. A system for distributing and executing an application on a wireless device, 
comprising: 

=;-; means for receiving the application and identification information; 

M means for assigning a permission to the application; 

=h means for transmitting the application, the permission and the identification 

^ information to the device using a modification detection technique; 

10 means for determining whether the application was modified during transmission; 

« % means for storing a rule on the device; 

**] means for determining if the application may be process using the permission and 

the rule; and 

== f means for removing the application from the device. 

[c30] 30. A method of processing application distribution, comprising the steps of: 
receiving the application and identification information; 
certifying the application satisfies a predetermined criterion; 
assigning a permission to the application; 

transmitting the application, the permission and the identification information to 
the device using a modification detection technique; and 

initiating a request to remove the application from a device. 
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[c31] 31. The method of claim 30, further comprising the step of: 

evaluating the received application and identification information to determine the 
identity of a developer of the application. 

[c32] 32. The method of claim 30, wherein the modification detection technique uses a 
digital signature. 

[c33] 33. A method of processing application distribution, comprising the steps of: 
receiving the application and identification information; 
assigning a permission to the application; and 

transmitting the application, the permission and the identification information to 
! «f the device using a modification detection technique. 

;=(e34] 34. The method of claim 33 further comprising the step of initiating a request to 
4= remove the application from a device. 

$$35] 35 The method of claim 33 further comprising the step of certifying the application 
j =H satisfies a predetermined criterion. 

;fi36] 36. The method of claim 33, further comprising the step of: 

evaluating the received application and identification information to determine the 
identity of a developer of the application. 

[c37] 37. The method of claim 33, wherein the modification detection technique uses a 
digital signature. 

[c38] 38. A system for application distribution, comprising: 

a central server operable to receive application and identity information, assign a 
permission, and transmit the application using a modification detection technique; and 
a network connected to the central server to receive the application. 
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[c39] 39. The system of claim 38, wherein the central server is further operable to certify 
the application satisfies a predefined criterion. 

[c40] 40. A system for application distribution, comprising: 

means for receiving the application and identification information; 
means for certifying the application satisfies a predetermined criterion; 
means for assigning a permission to the application; and 
means for transmitting the application, the permission and the identification 
information to the device using a modification detection technique. 

[c41] 41. A computer-readable medium containing computer-executable instructions for 

4f distributing applications, comprising the steps of: 
CO receiving the application and identification information; 

ph certifying the application satisfies a predetermined criterion; 

^ assigning a permission to the application; and 

rfl transmitting the application, the permission and the identification information to 

the device using a modification detection technique. 

!fc42] 42. A method for executing an application on a wireless device, comprising the steps 
of: 

storing a rule to evaluate a permission; 

receiving information comprising the application, the permission and an 
identification using a modification detection technique; 

receiving a request to execute the application on the wireless device; 

evaluating the received information to determine if the received information was 
modified; 

in the event the received information was not modified, evaluating the permission 
associated with the application; and 

in the event the permission is granted, executing the application. 
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[c43] 43. The method of claim 42, wherein the modification detection technique uses a 
digital signature. 

[c44] 44. The method of claim 42 further comprising the step of monitoring the execution 
of the application to determine if an improper operation is attempted. 

[c45] 45. The method of claim 42 further comprising the step of removing the application 
from the wireless device. 

[c46] 46. A method for executing an application on a wireless device, comprising the steps 



□ storing a rule to evaluate a permission; 

it} receiving information comprising the application, the permission and an 

: J1 identification using a modification detection technique; 

i y 

4= receiving a request to execute the application on the wireless device; and 

r[| evaluating the permission associated with an application; and 

';": aa in the event the information was modified, removing the application from the 

1J1 wireless device. 

[d47] 47. The method of claim 46, further comprising the steps of: 

in the event the received information was not modified, evaluating the permission 
associated with the application; and 



[c48] 48. The method of claim 46, wherein the modification detection technique uses a 
digital signature. 

[c49] 49. The method of claim 46 further comprising the step of monitoring the execution 
of the application to determine if an improper operation is attempted. 



of: 



in the event the permission is granted, executing the application. 
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[c50] 50. The method of claim 46 further comprising the step of removing the application 
from the wireless device in the event the improper operation is attempted. 

[c51] 51. A wireless device for executing an application, comprising: 

a input to receive an application and a permission; 

a rule contained in storage to evaluate the permission; and 

a key contained in storage to evaluate a digital signature, 
wherein the wireless device is operable to execute the application upon evaluation of the 
permission and digital signature. 

[c52] 52. A wireless device for executing an application, comprising: 
,« means for storing a rule to evaluate a permission; 

;3 means for receiving information comprising the application, the permission and 

4 an identification using a modification detection technique; 

■p means for receiving a request to execute the application on the wireless device; 

^ means for evaluating the received information to determine if the received 

information was modified; 
% means for, in the event the received information was not modified, evaluating the 

=U permission associated with the application; and 

«l means for, in the event the permission is granted, executing the application. 

[c53] 53. A computer-readable medium containing computer-executable instructions for 
distributing applications, comprising the steps of: 
storing a rule to evaluate a permission; 

receiving information comprising the application, the permission and an 
identification using a modification detection technique; 

receiving a request to execute the application on the wireless device; 

evaluating the received information to determine if the received information was 
modified; 

in the event the received information was not modified, evaluating the permission 
associated with the application; and 

in the event the permission is granted, executing the application. 
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